xmms
Page content
- Author: voroskoi
- Vulnerable: 1.2.10-11
- Unaffected: 1.2.10-12terminus1
Secunia Research has discovered two vulnerabilities in XMMS, which can be exploited by malicious people to compromise a user’s system.
- An integer underflow error exists in the processing of skin bitmap images. This can be exploited to cause a stack-based buffer overflow via specially crafted skin images containing manipulated header information. Successful exploitation allows execution of arbitrary code.
- An integer overflow error exists in the processing of skin bitmap images. This can be exploited to cause memory corruption via specially crafted skin images containing manipulated header information. Successful exploitation may allow the execution of arbitrary code.
- Bug Tracker URL: http://bugs.frugalware.org/task/1854